> Help > All Categories > Enterprise Security Assessment > Application and IT Security > Application Security

Has your SDLC Policy been approved by management and communicated to appropriate Constituents?

book reader icon
1 Minute
11/22/2024
facebook logo gray
linkedin logo gray
mail logo gray
No. While QR Planet's SDSC (secure software development lifecycle) Policy has been approved by management, as a small LLC, communication of our SDLC towards employees or consultants happens during the onboarding phase.

This is constantly monitored by management; The Policy itself is reviewed regularly by appropriate experts under managerial oversight.

Last update 3 months ago

QR Planet's Application Change Management Policy

Our Application Change Management Policy and Change Controll Processes has been developed, documented and deployed to ensure all our product's are up to date.

Does your SDLC include communicating vulnerabilities to a Security Monitoring and Response Group?

As a small LLC, communication of vulnerabilities to all relevant employees, partners or consultants is part of daily business and happens continuously.

Do you have a Backup Policy in place?

Backups of QR Planet's (production) data are performed in full accordance with all relevant internal Policies and compliance requirements and are stored on-site.

Do you have a Vulnerability Management Policy in place?

QR Planet's vulnerability management policy has been approved by management and was communicated to all appropriate constituents and it has an owner assigned.